Mmastodon BusinessCrypto first seen 3 d ago, last 3 d ago, peak #6
BTCPay Server hot wallets drained in attacks on outdated instances
Original: 🤖 BTCPay Server hot wallets drained: attacks target self-hosted instances running 2.4.1 or older. Actors logged in as ad
Self-hosted BTCPay Server instances running version 2.4.1 or older are being attacked, with intruders logging in as admin and draining hot wallets of BTC and LTC. A fix shipped in version 2.4.7, released as an emergency update after Anthropic's Frontier OSS scanner flagged the vulnerability. Administrators running outdated versions are urged to upgrade immediately.
Why now: Active exploitation is draining real funds, and the unusual involvement of an AI-based vulnerability scanner is drawing attention.
BTCPay ServerBitcoinLitecoinAnthropic
Evidence
- 🤖 BTCPay Server hot wallets drained: attacks target self-hosted instances running 2.4.1 or older. Actors logged in as admin and stole BTC/LTC. Fixed in 2.4.7, an emergency release after Anthropic's Frontier OSS scanner flagged the vuln. 🔗 https://www.… · cloud@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/4700151